Engineers from Amazon Web Services (AWS) have described how the team that maintains the Linux kernel for EC2 infrastructure handles kernel CVEs. The process combines an automated filter, an AI agent and human review. The team also argues that it needs to move to newer long-term-support (LTS) kernels, as older branches collect fixes that are never backported.
Dylan Johnson and Justinien Bouron gave the talk at the Linux Plumbers Conference in Prague earlier this month. At the start of the recording, Johnson explains that the team maintains the kernel used within EC2 infrastructure. This is separate from Amazon Linux and from the kernels that customers run in their virtual machines.
After the kernel project became a CVE Numbering Authority in February 2024, the team saw about two kernel CVEs a week before 2024 and about 16 a day afterwards, with 848 published on 15 August 2026. The kernel CVE documentation states that the project cannot know…
https://www.infoq.com/news/2026/10/aws-ai-agents-linux-kernel-cves/
